Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)

projectzero.google | blog | #windows | #exploitation | #sandbox | #technique | #virtual-memory

Summary

The 2025 refresh of a Windows exploitation technique that traps and intercepts virtual memory access, building reliable exploitation primitives, with updated caveats.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Windows Sandbox Attack Surface Analysis
Analyzing the attack surface of user-mode sandboxed applications helps find elevation of privilege bugs; automating the enumeration matters for initial analysis and detecting regressions.
blog · projectzero.google
Dude, where’s my heap?
A Google Project Zero post examining heap spraying and heap address randomization, and how browser exploits can still succeed against them.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
vulnerability · projectzero.google
[CVE-2015-4481] Between a Rock and a Hard Link
Hard links are legal inside Windows sandboxes, making them a useful exploitation primitive; the post weighs their pros and cons and demonstrates them in the real vulnerability CVE-2015-4481.
vulnerability · projectzero.google
Internet Explorer EPM Sandbox Escape CVE-2014-6350
A Google Project Zero post detailing exploitation of CVE-2014-6350 to escape Internet Explorer's Enhanced Protected Mode sandbox.
blog · projectzero.google
Windows Exploitation Techniques: Winning Race Conditions with Path Lookups
A Windows exploitation technique post showing how path lookup behavior can be leveraged to reliably win race conditions, with worked examples and exploitation implications.
back